Report Overview
Visitedpublic
2025-07-10 16:15:24
URL
www.foundit.in/rio/autoLogin/%D0%B0%D1%81%D1%81%CE%BF%D5%BD%D5%B8t%D1%95.m%D1%96%D1%81r%D0%BE%D1%95%D0%BEft.%D1%81%D0%BEm+%D1%95%D1%96%D6%81%D5%B8%D1%96%D5%B8=%D1%95%D0%B5%D1%81%D5%BDr%D0%B5+v2+%D1%96d%D0%B5%D5%B8t%D1%96f%D1%96%D0%B5r=%D1%80%D0%B0%D1%95%D1%95%D1%96v%D0%B5xai=%D0%B0%D1%81%D1%81%CE%BF%D5%BD%D5%B8t%D1%95.m%D1%96%D1%81r%D0%BE%D1%95%D0%BEft.%D1%81%D0%BEm+%D1%95%D1%96%D6%81%D5%B8%D1%96%D5%B8=%D1%95%D0%B5%D1%81%D5%BDr%D0%B5+v2+%D1%96d%D0%B5%D5%B8t%D1%96f%D1%96%D0%B5r=%D1%80%D0%B0%D1%95%D1%95%D1%96v%D0%B5/cnZXQ25mTmUzWTdHYlpUZ0JKQTY3MGN0NG95VkVoQlRYQStBZElFZzFHeHB4KzVmRWd4T0NJcm05K2l0a255V0NGeGVDVkJCTFdOSE1XbXJmNnZxOVNNNDZvK1QzUStVRTVINVhaZ2VUQTl0aU01eko3ZS9pT3kzanpyR1VMODI=%D0%B0%D1%81%D1%81%CE%BF%D5%BD%D5%B8t%D1%95.m%D1%96%D1%81r%D0%BE%D1%95%D0%BEft.%D1%81%D0%BEm+%D1%95%D1%96%D6%81%D5%B8%D1%96%D5%B8=%D1%95%D0%B5%D1%81%D5%BDr%D0%B5+v2+%D1%96d%D0%B5%D5%B8t%D1%96f%D1%96%D0%B5r=%D1%80%D0%B0%D1%95%D1%95%D1%96v%D0%B5xai=%D0%B0%D1%81%D1%81%CE%BF%D5%BD%D5%B8t%D1%95.m%D1%96%D1%81r%D0%BE%D1%95%D0%BEft.%D1%81%D0%BEm+%D1%95%D1%96%D6%81%D5%B8%D1%96%D5%B8=%D1%95%D0%B5%D1%81%D5%BDr%D0%B5+v2+%D1%96d%D0%B5%D5%B8t%D1%96f%D1%96%D0%B5r=%D1%80%D0%B0%D1%95%D1%95%D1%96v%D0%B5?return_url=https://dstv.parsiandc.ir/ZXQ25mTmUzWTdHYlpUZ0JKQTY3MGN0NG95VkVoQlRYQStBZElFZzFHeHB4KzVmRWd4T0NJcm05K2l0a255V0NGeGVDVkJCTFdOSE1XbXJmNnZxOVNNNDZvK1QzUStVRTVINVhaZ2VUQTl0aU01eko3ZS9pT3kzanpyR1VMOD/fffffsf/anN3YXluZUBwcm9zcGVjdGVkdWNhdGlvbi5jb20N
Finishing URL
jibm.ennncgnjgxek.es/1yl6h9ln4s?common/oauth2/v2.0/authorize?client_id=760540b904999-cb62168d-e51ce3f3e520fea-d542b7da8ae8f-3eac0ca5-32659e641d74f5-a06d5a45a-e19543f619f7-91fcb056-1981491872ed&locales=en
IP / ASN
23.49.27.205
#16625 AKAMAI-AS
Title
Continue For Secure Profile Login

Suspicious - Anti-debugging code

Phishing - Tycoon Phishing Kit

Detections

urlquery
48
Network Intrusion Detection
1
Threat Detection Systems
2

Host Summary

HostRankRegisteredFirst SeenLast Seen
objects.githubusercontent.com
1340602014-02-062021-11-012025-07-09
get.geojs.io
174182017-02-182017-03-302025-07-10
aadcdn.msauthimages.net
47952018-11-122019-08-142025-07-06
www.foundit.in
unknown2005-08-052022-11-232025-07-10
fonts.googleapis.com
88772005-01-252012-05-232025-07-09
github.com
14232007-10-092016-07-132025-07-09
jibm.ennncgnjgxek.es
unknownunknown2025-07-102025-07-10
challenges.cloudflare.com
unknown2009-02-172021-10-202025-07-09
dstv.parsiandc.ir
unknownunknown2025-07-102025-07-10
cdnjs.cloudflare.com
2352009-02-172012-05-232025-07-09
ok4static.oktacdn.com
165922014-11-112018-06-152025-07-09
cdn.jsdelivr.net
4392012-05-162012-09-302025-07-09
aivzpur00oi9xsx1xlk266csg6vwy8vqu4hkqzuigco7wakx5fq.wxthhsjidr.es
unknownunknown2025-07-102025-07-10
code.jquery.com
6342005-12-102012-05-212025-07-09
93xw.zgyolfud.es
unknownunknown2025-07-102025-07-10
aadcdn.msauth.net
14212018-10-252018-11-192025-07-10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
mediumClient IP
104.26.0.100
ET INFO External IP Address Lookup Domain (get .geojs .io) in TLS SNI

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
mediumwxthhsjidr.esSinkholed

ThreatFox

No alerts detected


JavaScript (150)

HTTP Transactions (72)

URLIPResponseSize
GET jibm.ennncgnjgxek.es/rstUHOLWjN1M8d2ipXiA7xkc1NM5f3ijwadPt8mP3nUiJyNg2cd194
172.67.143.9200 OK268 B
GET jibm.ennncgnjgxek.es/GDSherpa-bold.woff2
172.67.143.9200 OK28 kB
GET jibm.ennncgnjgxek.es/uv3oJud2k3DXgTNTGnS1KeBo2nNqr9dm4rJdus5y12130
172.67.143.9200 OK644 B
GET jibm.ennncgnjgxek.es/mnXluuMjGDtPY343repeuvas4DyD4dpJjc78150
172.67.143.9200 OK270 B
GET jibm.ennncgnjgxek.es/wx47s4zhXsZDbxQgNb3IhX8TxAhxn1wC2oieffBnrsrgbIIjcw8KTxM7af490180
172.67.143.9200 OK2.9 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/yr3sn/0x4AAAAAABhRd1JlKFAob0ad/auto/fbE/new/normal/auto/
104.18.94.41200 OK27 kB
GET jibm.ennncgnjgxek.es/abcLX4s36IuApqmOef28
172.67.143.9200 OK36 kB
GET jibm.ennncgnjgxek.es/favicon.ico
172.67.143.9404 Not Found0 B
GET jibm.ennncgnjgxek.es/345z5tbjNkydgliJ4ijc69EGW5DObUubh89101
172.67.143.9200 OK292 kB
GET jibm.ennncgnjgxek.es/URi0C!wDYUmIAlz/$jswayne@prospecteducation.com
172.67.143.9200 OK6.7 kB
GET jibm.ennncgnjgxek.es/favicon.ico
172.67.143.9404 Not Found0 B
GET jibm.ennncgnjgxek.es/GDSherpa-bold.woff
172.67.143.9200 OK36 kB
GET jibm.ennncgnjgxek.es/GDSherpa-vf.woff2
172.67.143.9200 OK44 kB
GET jibm.ennncgnjgxek.es/uvBd4coPek7Vvu6qpMyUTSBSiID6niPmnAuA5Axcmoc347s8fWnQJoajPHRveMYgsnWgh260
172.67.143.9200 OK18 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK48 kB
GET dstv.parsiandc.ir/ZXQ25mTmUzWTdHYlpUZ0JKQTY3MGN0NG95VkVoQlRYQStBZElFZzFHeHB4KzVmRWd4T0NJcm05K2l0a255V0NGeGVDVkJCTFdOSE1XbXJmNnZxOVNNNDZvK1QzUStVRTVINVhaZ2VUQTl0aU01eko3ZS9pT3kzanpyR1VMOD/fffffsf/anN3YXluZUBwcm9zcGVjdGVkdWNhdGlvbi5jb20N
91.207.205.38200 OK0 B
GET code.jquery.com/jquery-3.6.0.min.js
151.101.2.137200 OK90 kB
GET 93xw.zgyolfud.es/allo@xzylq
104.21.48.1200 OK1 B
GET objects.githubusercontent.com/github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250710%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250710T161310Z&X-Amz-Expires=1800&X-Amz-Signature=2ce625fb68296d6ed192203bc7953c4c2fc6a376c427cf395bcb069e4cccb351&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream
185.199.110.133200 OK10 kB
POST jibm.ennncgnjgxek.es/URi0C!wDYUmIAlz/$jswayne@prospecteducation.com
172.67.143.9200 OK90 B
POST jibm.ennncgnjgxek.es/kfzRj53kP2zyiLutkq27GaulrvJyZcwODTckx2axKbFew
172.67.143.9200 OK460 B
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/563317621:1752161355:ymbNPR-nnu2qjWtii1nxT1NjOrA98hCOshaSeCuTthY/95d15b0e398f56ba/t_UwbSmBTTecgTI04IA0_BEk7kuSrWwVIrnZWKaHj_c-1752164082-1.2.1.1-HhJuPZKieTbB6J0mwedgGce_.OmDS5SQ8HFSVmg5Z6zoQql.B5bXLqv8GrVwPNhA
104.18.94.41200 OK29 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/563317621:1752161355:ymbNPR-nnu2qjWtii1nxT1NjOrA98hCOshaSeCuTthY/95d15b0e398f56ba/t_UwbSmBTTecgTI04IA0_BEk7kuSrWwVIrnZWKaHj_c-1752164082-1.2.1.1-HhJuPZKieTbB6J0mwedgGce_.OmDS5SQ8HFSVmg5Z6zoQql.B5bXLqv8GrVwPNhA
104.18.94.41200 OK4.9 kB
GET jibm.ennncgnjgxek.es/URi0C!wDYUmIAlz/$jswayne@prospecteducation.com
172.67.143.9200 OK26 kB
GET get.geojs.io/v1/ip/geo.json
104.26.0.100200 OK335 B
GET jibm.ennncgnjgxek.es/favicon.ico
172.67.143.9404 Not Found0 B
GET aadcdn.msauthimages.net/dbd5a2dd-3p-umm6rf264yyhjag2zfiati9kjy9-aq0h0kruyh6a/logintenantbranding/0/illustration?ts=637545250449101366
95.101.10.202200 OK61 kB
GET www.foundit.in/akam/13/5df2d95b
23.49.27.205200 OK27 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
104.18.94.41200 OK86 B
GET www.foundit.in/middleware/rioAutoLogin
23.49.27.205401 Unauthorized44 B
GET jibm.ennncgnjgxek.es/1yl6h9ln4s?common/oauth2/v2.0/authorize?client_id=760540b904999-cb62168d-e51ce3f3e520fea-d542b7da8ae8f-3eac0ca5-32659e641d74f5-a06d5a45a-e19543f619f7-91fcb056-1981491872ed&locales=en
172.67.143.9200 OK218 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK48 kB
GET aadcdn.msauthimages.net/dbd5a2dd-3p-umm6rf264yyhjag2zfiati9kjy9-aq0h0kruyh6a/logintenantbranding/0/bannerlogo?ts=637545259425899221
95.101.10.202200 OK4.3 kB
GET www.foundit.in/rio/autoLogin/%D0%B0%D1%81%D1%81%CE%BF%D5%BD%D5%B8t%D1%95.m%D1%96%D1%81r%D0%BE%D1%95%D0%BEft.%D1%81%D0%BEm+%D1%95%D1%96%D6%81%D5%B8%D1%96%D5%B8=%D1%95%D0%B5%D1%81%D5%BDr%D0%B5+v2+%D1%96d%D0%B5%D5%B8t%D1%96f%D1%96%D0%B5r=%D1%80%D0%B0%D1%95%D1%95%D1%96v%D0%B5xai=%D0%B0%D1%81%D1%81%CE%BF%D5%BD%D5%B8t%D1%95.m%D1%96%D1%81r%D0%BE%D1%95%D0%BEft.%D1%81%D0%BEm+%D1%95%D1%96%D6%81%D5%B8%D1%96%D5%B8=%D1%95%D0%B5%D1%81%D5%BDr%D0%B5+v2+%D1%96d%D0%B5%D5%B8t%D1%96f%D1%96%D0%B5r=%D1%80%D0%B0%D1%95%D1%95%D1%96v%D0%B5/cnZXQ25mTmUzWTdHYlpUZ0JKQTY3MGN0NG95VkVoQlRYQStBZElFZzFHeHB4KzVmRWd4T0NJcm05K2l0a255V0NGeGVDVkJCTFdOSE1XbXJmNnZxOVNNNDZvK1QzUStVRTVINVhaZ2VUQTl0aU01eko3ZS9pT3kzanpyR1VMODI=%D0%B0%D1%81%D1%81%CE%BF%D5%BD%D5%B8t%D1%95.m%D1%96%D1%81r%D0%BE%D1%95%D0%BEft.%D1%81%D0%BEm+%D1%95%D1%96%D6%81%D5%B8%D1%96%D5%B8=%D1%95%D0%B5%D1%81%D5%BDr%D0%B5+v2+%D1%96d%D0%B5%D5%B8t%D1%96f%D1%96%D0%B5r=%D1%80%D0%B0%D1%95%D1%95%D1%96v%D0%B5xai=%D0%B0%D1%81%D1%81%CE%BF%D5%BD%D5%B8t%D1%95.m%D1%96%D1%81r%D0%BE%D1%95%D0%BEft.%D1%81%D0%BEm+%D1%95%D1%96%D6%81%D5%B8%D1%96%D5%B8=%D1%95%D0%B5%D1%81%D5%BDr%D0%B5+v2+%D1%96d%D0%B5%D5%B8t%D1%96f%D1%96%D0%B5r=%D1%80%D0%B0%D1%95%D1%95%D1%96v%D0%B5?return_url=https://dstv.parsiandc.ir/ZXQ25mTmUzWTdHYlpUZ0JKQTY3MGN0NG95VkVoQlRYQStBZElFZzFHeHB4KzVmRWd4T0NJcm05K2l0a255V0NGeGVDVkJCTFdOSE1XbXJmNnZxOVNNNDZvK1QzUStVRTVINVhaZ2VUQTl0aU01eko3ZS9pT3kzanpyR1VMOD/fffffsf/anN3YXluZUBwcm9zcGVjdGVkdWNhdGlvbi5jb20N
23.49.27.205200 OK5.9 kB
GET www.foundit.in/rio/public/fonts/loader-mq.svg?77708766c7bbfa1203aec1547100faa7
23.49.27.205200 OK1.8 kB
POST jibm.ennncgnjgxek.es/cv04PhK6Ci6Llhwuhgh7ALB5xrdCqr
172.67.143.9200 OK20 B
GET ok4static.oktacdn.com/fs/bcg/4/gfsh9pi7jcWKJKMAs1t7
3.167.2.64200 OK11 kB
GET jibm.ennncgnjgxek.es/kluI9sQfu2BQZgE7cvtbW1rYfMNNEL8BwopNP5runFbkRnbfYUd0SCDsqFnrWSyz221
172.67.143.9200 OK1.3 kB
GET challenges.cloudflare.com/turnstile/v0/b/e7e9d014f96e/api.js
104.18.94.41200 OK49 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/95d15b0e398f56ba/1752164083776/eea7a399980357b77ec676539f3acbd9a682e56499d3f162fbdf97fa6429a224/5lbm9Ukk0exPd_p
104.18.94.41401 Unauthorized1 B
GET www.foundit.in/favicon.ico
23.49.27.205200 OK15 kB
GET jibm.ennncgnjgxek.es/URi0C!wDYUmIAlz/$jswayne@prospecteducation.com
172.67.143.9200 OK1.4 kB
GET ok4static.oktacdn.com/assets/loginpage/font/assets/proximanova-reg-webfont.353416ed0ff540352235.woff2
3.167.2.64200 OK20 kB
GET www.foundit.in/rio/public/css/app.css?20250708141345
23.49.27.205200 OK99 kB
GET fonts.googleapis.com/css2?family=Noto+Sans:wght@400;600;700;900&display=swap
142.250.74.10200 OK13 kB
GET ok4static.oktacdn.com/assets/loginpage/css/loginpage-theme.e0d37a504604ef874bad26435d62011f.css
3.167.2.64200 OK10 kB
GET jibm.ennncgnjgxek.es/gheCE99KDWhlbsmoVLz4i48zzERpQg3kkACgB1o4klpZNmZ91vGSa0jsBXWgef210
172.67.143.9200 OK25 kB
GET jibm.ennncgnjgxek.es/qrsxEkmietStgVBFx0V1V3SoSLCCh6fuvSWBvAabGpBXJGKwpQnaMitE7xLfuwuvef240
172.67.143.9200 OK9.6 kB
GET cdn.jsdelivr.net/npm/lz-string@1.4.4/libs/lz-string.min.js
151.101.1.229200 OK4.7 kB
GET jibm.ennncgnjgxek.es/klxnY3JA1ivrTbxMAk9V5WWWscdZ5yg85Z4AMVRn56170
172.67.143.9200 OK7.4 kB
POST aivzpur00oi9xsx1xlk266csg6vwy8vqu4hkqzuigco7wakx5fq.wxthhsjidr.es/hovydutfbehbsmrxlvrVmQdQNVYODPTJJPWLOAVOZRCHGSTYBGZQMNJWTVETPIQUAYFHXRUMWKLIMMJRYpqX7syHeXWapfU34XUGuv40
172.67.200.112200 OK876 B
GET code.jquery.com/jquery-3.6.0.min.js
151.101.2.137200 OK90 kB
POST jibm.ennncgnjgxek.es/nzftpMUNDUiLp3V583W1wd9kBXETTDS8h7xl7xK7wKD1v
172.67.143.9200 OK1 B
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK48 kB
GET code.jquery.com/jquery-3.6.0.min.js
151.101.2.137200 OK90 kB
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK48 kB
POST challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/563317621:1752161355:ymbNPR-nnu2qjWtii1nxT1NjOrA98hCOshaSeCuTthY/95d15b0e398f56ba/t_UwbSmBTTecgTI04IA0_BEk7kuSrWwVIrnZWKaHj_c-1752164082-1.2.1.1-HhJuPZKieTbB6J0mwedgGce_.OmDS5SQ8HFSVmg5Z6zoQql.B5bXLqv8GrVwPNhA
104.18.94.41200 OK290 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=95d15b0e398f56ba&lang=auto
104.18.94.41200 OK144 kB
GET jibm.ennncgnjgxek.es/12lsE1ysy6K41W8absyb0je6717
172.67.143.9200 OK28 kB
GET jibm.ennncgnjgxek.es/GDSherpa-regular.woff2
172.67.143.9200 OK29 kB
GET jibm.ennncgnjgxek.es/GDSherpa-regular.woff
172.67.143.9200 OK37 kB
GET jibm.ennncgnjgxek.es/GDSherpa-vf2.woff2
172.67.143.9200 OK93 kB
GET aadcdn.msauth.net/shared/1.0/content/images/backgrounds/2_11d9e3bcdfede9ce5ce5ace2d129f1c4.svg
13.107.246.67200 OK1.9 kB
GET www.foundit.in/rio/public/js/loader.js?20250708141345
23.49.27.205200 OK123 kB
GET challenges.cloudflare.com/turnstile/v0/api.js?render=explicit
104.18.94.41302 Found49 kB
GET challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/95d15b0e398f56ba/1752164083777/q7jISBsSQ6ZIMfZ
104.18.94.41200 OK304 B
GET cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js
104.17.25.14200 OK48 kB
GET jibm.ennncgnjgxek.es/qrMjZBYrHlzPiBSyDqAgphbm3xefZRogUeekBzDIWV67137
172.67.143.9200 OK892 B
GET ok4static.oktacdn.com/assets/js/sdk/okta-signin-widget/7.18.0/css/okta-sign-in.min.css
3.167.2.64200 OK223 kB
GET jibm.ennncgnjgxek.es/favicon.ico
172.67.143.9404 Not Found0 B
GET github.com/fent/randexp.js/releases/download/v0.4.3/randexp.min.js
140.82.121.4302 Found10 kB
GET get.geojs.io/v1/ip/geo.json
104.26.0.100200 OK335 B